Messages

1

Zenarmor (Sensei) / Re: Supress alerts

« on: October 11, 2021, 05:37:18 pm »

Hi,

In the repots menu, there is Add Filter option. When you add a filter it will also apply to the live session explorer. Or in report settings, there are hide local / blocked sessions options. These will also decrease the values.

2

Zenarmor (Sensei) / Re: Sensei Bug?

« on: October 11, 2021, 05:26:49 pm »

Hi,

Looking into the logs.

3

Zenarmor (Sensei) / Re: Sensei seems to choke when enabled on LAN with LAGG

« on: October 07, 2021, 06:44:01 pm »

Hi,

Sensei uses netmap that is an Operating System subsystem to grab packets off the wire. Netmap is not compatible with LAGG interfaces yet. So this will occur if you use Suricata in IPS mode as well.

4

Zenarmor (Sensei) / Re: Supress alerts

« on: October 06, 2021, 08:36:31 pm »

Hi,

Do you mean reports or system logs?

5

Zenarmor (Sensei) / Re: Country Blocks

« on: October 06, 2021, 08:21:18 pm »

Hi,

GeoIP filter is possible in Zenarmor (Sensei) capability but not supported as configuration yet. I will forward it to the product team as a suggestion.

6

Zenarmor (Sensei) / Re: Sensei service stopped

« on: September 24, 2021, 05:29:54 pm »

Hi,

We got the same bug report from a few more. We are looking into it.

7

Zenarmor (Sensei) / Re: mongodb warning in log file

« on: September 23, 2021, 04:42:43 pm »

Hi,

There is a performance trick for MongoDB. It will be added automatically with 1.10 on Sensei. Please check the following:
https://forum.opnsense.org/index.php?topic=24289.0

8

Zenarmor (Sensei) / Re: Sensei database recommendations for about 7 days of traffic

« on: September 23, 2021, 04:40:03 pm »

Hi,

You can bypass by adding a static CPU score then can be installed Elasticsearch. Please follow the instructions:

-Log in to the console as root
- Open this this file: /usr/local/opnsense/scripts/OPNsense/Sensei/check_hardware.sh
- Add 37. line CPU_SCORE=301000
like;

CPU_SCORE=301000
if [ $CPU_SCORE -le 300000 ];

9

Zenarmor (Sensei) / Re: Sensei and tripadvisor, don't love each other?

« on: September 10, 2021, 05:33:01 pm »

Hi,

static.tacdn.com was re-classified and published. The site should be accessible normally.

10

Zenarmor (Sensei) / Re: Sensei engine disabling

« on: September 10, 2021, 05:30:45 pm »

Hi,

Can you send a gub report from the upper right corner of SenseiGUI by selecting all checkboxes?

11

Zenarmor (Sensei) / Re: Sensei and tripadvisor, don't love each other?

« on: September 04, 2021, 11:33:04 pm »

Hi,

Can you share the blocked domain names on Reports - Blocks - Live Blocked Sessions Explorer?
It could be false positive classification.

12

Zenarmor (Sensei) / Re: Expiration of the log/archive directory

« on: August 28, 2021, 08:03:52 pm »

Hi,

Normally logs are deleted monthly, but it will be adjustable with the upcoming release.

13

Zenarmor (Sensei) / Re: External eslasticsearch - no status page, no device count

« on: July 30, 2021, 05:46:39 pm »

Hi Serban,

Waiting for the log details as I wrote in the ticket.

14

Zenarmor (Sensei) / Re: 21.7 crashes after upgrade - restore backup same results

« on: July 29, 2021, 06:31:29 pm »

Yes I mean NIC. It is em or igb?

15

Zenarmor (Sensei) / Re: 21.7 and igb interface problem

« on: July 29, 2021, 06:30:32 pm »

Hi,

I didn't get yet. Can you send again?